kube-acp-stack 2.29.0 Helm chart

Name: kube-acp-stack Helm chart 2.29.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudentity

Scored 29 Sept 2026

kube-acp-stack collects acp charts combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster

Version 2.29.0 yesterdayApp version not verified against the render 0Artifact Hub

kube-acp-stack 2.29.0 deploys 7 container images: docker.secureauth.com/acp-distroless, cockroachdb/cockroach, library/alpine, bitnamilegacy/redis-cluster and 3 more. Across the 6 measured, 1,815 findings — 10 critical, 21 high — 8 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.4.3-0, fixed in 6.2.20.

Radar Score

21,64910213431,441

1,815 findings over 6 of 7 images measured

KEV ×8 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
docker.secureauth.com/acp-distroless	2.29.0	—	unmeasured
cockroachdb/cockroach×2	v22.2.9	362962	1,811
library/alpine	latest	0000	0
bitnamilegacy/redis-cluster	7.4.3-debian-12-r0	2053197	2,857
timescale/timescaledb-ha×2	pg17.2-ts2.18.2	34198996	13,203
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert	1.3	1757182	3,296
curlimages/curl	7.87.0	1464	482

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,457 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2011-10007	libfile-find-rule-perl@0.34-3	0.34-4~deb12u1
Medium	ALPINE-CVE-2023-35945	nghttp2@1.47.0-r0	1.47.0-r1
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	UBUNTU-CVE-2023-37920	python-certifi@2020.6.20-1	no fix listed
Medium	UBUNTU-CVE-2023-37920	python-pip@22.0.2+dfsg-1ubuntu0.5	no fix listed
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.23.0	1.33.0
Medium	GHSA-9v9h-cgj8-h64p	cryptography@3.4.8	42.0.2
Medium	UBUNTU-CVE-2024-0727	openssl@3.0.2-0ubuntu1.19	no fix listed
Medium	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u2	no fix listed
Medium	UBUNTU-CVE-2026-2781	nss@2:3.98-0ubuntu0.22.04.2	2:3.98-0ubuntu0.22.04.3
Medium	UBUNTU-CVE-2025-7424	libxslt@1.1.34-4ubuntu0.22.04.1	1.1.34-4ubuntu0.22.04.5
Medium	DEBIAN-CVE-2026-5260	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Medium	RHSA-2024:3626	libxml2@2.9.7-15.el8_7.1	0:2.9.7-18.el8_10.1
Medium	RHSA-2023:2963	curl@7.61.1-25.el8_7.3	0:7.61.1-30.el8
Medium	RHSA-2023:7743	curl@7.29.0-59.el7_9.1	0:7.29.0-59.el7_9.2
Medium	UBUNTU-CVE-2026-4224	python3.10@3.10.12-1~22.04.9	3.10.12-1~22.04.16
Medium	GHSA-63hf-3vf5-4wqf	aiohttp@3.11.13	3.13.4
Medium	UBUNTU-CVE-2018-10126	libjpeg-turbo@2.1.2-0ubuntu1	no fix listed
Medium	RHSA-2023:3018	libarchive@3.3.3-4.el8	0:3.3.3-5.el8
Medium	DEBIAN-CVE-2026-28387	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
Medium	UBUNTU-CVE-2026-8924	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.25
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	RHSA-2024:0253	sqlite@3.26.0-17.el8_7	0:3.26.0-19.el8_9
Medium	DEBIAN-CVE-2025-13151	libtasn1-6@4.19.0-2+deb12u1	no fix listed
Medium	BIT-redis-2025-48367	redis@7.4.3-0	6.2.19
Medium	UBUNTU-CVE-2018-17434	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GHSA-2xpw-w6gg-jr37	urllib3@1.26.5	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.26.5	2.6.0
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	UBUNTU-CVE-2018-17438	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	DEBIAN-CVE-2026-42009	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2024-26461	krb5@1.19.2-2ubuntu0.5	1.19.2-2ubuntu0.6
Medium	DEBIAN-CVE-2019-1010024	glibc@2.36-9+deb12u10	no fix listed
Medium	DEBIAN-CVE-2026-33846	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2019-6988	openjpeg2@2.4.0-6ubuntu0.3	no fix listed
Medium	UBUNTU-CVE-2023-6237	openssl@3.0.2-0ubuntu1.19	no fix listed
Medium	UBUNTU-CVE-2022-41409	pcre2@10.39-3ubuntu0.1	no fix listed
Medium	GHSA-3ww4-gg4f-jr7f	cryptography@3.4.8	42.0.0
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
Medium	UBUNTU-CVE-2024-9143	openssl@3.0.2-0ubuntu1.19	no fix listed
Medium	RHSA-2023:5615	libssh2@1.8.0-4.el7	0:1.8.0-4.el7_9.1
Medium	UBUNTU-CVE-2026-39979	jq@1.6-2.1ubuntu3	1.6-2.1ubuntu3.2
Medium	DEBIAN-CVE-2026-8376	perl@5.36.0-7+deb12u2	no fix listed
Medium	GHSA-m7wr-2xf7-cm9p	github.com/jackc/pgx@v3.6.2+incompatible	4.18.2
Medium	UBUNTU-CVE-2018-13875	hdf5@1.10.7+repack-4ubuntu2	no fix listed
Medium	GO-2021-0243	stdlib@go1.13.14	1.15.14
Medium	UBUNTU-CVE-2025-27113	libxml2@2.9.13+dfsg-1ubuntu0.5	2.9.13+dfsg-1ubuntu0.6
Medium	GO-2022-0273	stdlib@go1.13.14	1.16.8
Medium	RHSA-2023:5249	ncurses@6.1-9.20180224.el8	0:6.1-9.20180224.el8_8.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.29.0latest	yesterday	—	10213431,441	21,649
2.28.0	2 months ago	—	10213431,441	21,649

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudentity/kube-acp-stack.svg)](https://charts.stackradar.io/charts/cloudentity/kube-acp-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.